CVE-2023-22621
Assigner: mitre
Published: 2023-04-19T00:00:00
State: PUBLISHED
descriptions: value: Strapi through 4.5.5 allows authenticated Server-Side Template Injection (SSTI) that can be exploited to execute arbitrary code on the server. A remote attacker with access to the Strapi admin panel can inject a crafted payload that executes code on the server into an email template that bypasses the validation checks that should prevent code execution.
affected: vendor: n/a
product: n/a
versions: version: n/a
status: affected
problemTypes: descriptions: type: text
description: n/a